diff --git a/flake.nix b/flake.nix
index ba4a26c..1ee0333 100644
--- a/flake.nix
+++ b/flake.nix
@@ -24,14 +24,15 @@
 
       hosts = {
         golgi.modules = with modules; [
-          common
           admin
-          zsh
-          hardware-hetzner
-          hardened
           agenix.nixosModules.default
-          forgejo
           caddy
+          common
+          forgejo
+          hardened
+          hardware-hetzner
+          syncthing
+          zsh
         ];
       };
 
diff --git a/modules/caddy.nix b/modules/caddy.nix
index 3e5d237..cf892a3 100644
--- a/modules/caddy.nix
+++ b/modules/caddy.nix
@@ -34,6 +34,10 @@ In future, the following may be set up too:
 "
   '';
     }
+    (mkIf config.services.syncthing.enable {
+      virtualHosts."syncthing.tecosaur.net".extraConfig =
+        ''reverse_proxy ${config.services.syncthing.guiAddress}'';
+    })
     (mkIf config.services.gitea.enable {
       virtualHosts."git.tecosaur.net".extraConfig =
       ''
diff --git a/modules/syncthing.nix b/modules/syncthing.nix
new file mode 100644
index 0000000..e70ae4a
--- /dev/null
+++ b/modules/syncthing.nix
@@ -0,0 +1,22 @@
+{ config, lib, ... }:
+
+with lib;
+
+{
+  services.syncthing = {
+    enable = true;
+    dataDir = "/var/lib/syncthing";
+    guiAddress = "localhost:8384";
+    overrideDevices = true;
+    overrideFolders = true;
+    settings = {
+      gui = {
+        user = "tec";
+        password = "$2a$10$yXPBFhobbJGT3FRNEWmdRO891ZLTF247XQ2fYmJK8dsqzIWLKOPKC";
+      };
+      devices = {
+        "tranquillity" = { id = "VXWXMXK-MWENVPV-PV75JQH-45OP44F-QMPH645-JVWGJB2-C2GKHSV-QARV5A2"; };
+      };
+    };
+  };
+}